Well, I'm not sure why you think port 1024 is netarx (their docos refer to port 1040), but port 1024 is the lowest dynamic port in most (?) linux systems. Somewhat more interesting is destination port 514, which is normally used to receive incoming UDP syslog messages (search Google for "port 514"). It looks as though host 24.130.38.48 on your network (ttl=255) is spewing out syslog messages for all to see.
-Richard > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Jim Van > Eeckhoutte > Sent: Sunday, January 06, 2002 11:23 PM > To: , > Subject: [Leaf-user] HUH? blocked in log > > > What is this? > Jan 7 13:34:24 FYRE kernel: Packet log: input DENY eth0 PROTO=17 > 24.130.38.48:1024 255.255.255.255:514 L=126 S=0x00 I=25181 F=0x4000 > T=255 (#46) > > Looked up port 1024 and explanation is netarx, what is netarx? > > > _______________________________________________ > Leaf-user mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/leaf-user > _______________________________________________ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
